Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pJOkN4K4zH5g_aiq6UFJcY7RjzM.roa
File:                     pJOkN4K4zH5g_aiq6UFJcY7RjzM.roa (raw, json)
Hash identifier:          PwT/yBvGZb+WvRUkhvUXUJHtg/phLd4WlpNm/g4I6R8=
Subject key identifier:   A4:93:A4:37:82:B8:CC:7E:60:FD:A8:AA:E9:41:49:71:8E:D1:8F:33
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       051F1FC0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pJOkN4K4zH5g_aiq6UFJcY7RjzM.roa
Signing time:             Fri 18 Mar 2022 01:01:38 +0000
ROA not before:           Fri 18 Mar 2022 01:01:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85925824 (0x51f1fc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 18 01:01:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a493a43782b8cc7e60fda8aae94149718ed18f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:a5:88:10:51:d2:5f:b3:ae:2a:f0:35:ee:
                    6a:6b:c2:56:90:21:0f:c4:75:39:8e:db:38:4d:a0:
                    8e:1c:4f:ea:6a:ae:07:d2:4a:6d:28:65:03:c5:a3:
                    8c:8c:42:0c:d8:4d:86:1d:2d:d5:27:ac:25:f2:3a:
                    01:63:c5:c7:b3:bb:1a:12:94:7a:cc:23:58:9a:f3:
                    6d:16:26:96:91:94:ec:94:37:82:06:aa:ae:90:73:
                    f9:25:f3:e2:f9:68:08:43:96:c8:70:56:24:8d:4d:
                    5a:e9:8d:9c:93:b1:9c:7b:ed:86:17:d9:39:03:f6:
                    e1:2e:bf:fc:f7:92:c2:bd:bc:39:5a:e7:57:ba:4a:
                    ae:dd:37:84:86:9b:6d:48:7e:e6:1e:bd:84:a8:e2:
                    5d:ae:74:be:51:a5:92:dc:72:3a:4e:52:c3:6d:05:
                    57:87:f1:1c:89:81:b4:c8:ed:66:c2:cc:ea:2f:8e:
                    fa:11:92:0a:89:dc:91:14:2a:1e:2a:98:6b:de:67:
                    6b:51:36:af:9d:17:74:3a:ee:5e:df:0f:8b:a9:17:
                    ce:97:65:0c:6c:a0:6e:7f:32:25:0c:d8:1b:a2:8e:
                    93:27:5b:20:fe:c0:92:79:7a:58:5b:ec:e7:84:01:
                    5c:91:01:45:c8:18:e3:33:6c:22:36:7d:e0:59:89:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:A4:37:82:B8:CC:7E:60:FD:A8:AA:E9:41:49:71:8E:D1:8F:33
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pJOkN4K4zH5g_aiq6UFJcY7RjzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         67:2e:74:e3:14:84:ef:a2:0e:d7:97:52:e4:84:3d:de:c9:5f:
         e6:31:96:77:6a:fb:22:81:7f:06:9d:49:f9:fe:21:60:60:b2:
         4e:f1:14:2c:41:71:bb:e5:01:f1:5b:1d:4f:25:81:2e:ea:d7:
         30:14:a1:0a:fc:c3:e1:06:2f:30:8e:46:4f:0b:68:68:41:9f:
         2e:e8:96:17:24:92:03:e8:9a:70:a2:57:e5:2d:e9:8f:14:2f:
         c5:52:7e:ac:90:14:59:ed:13:20:a2:19:4b:89:31:ed:a5:37:
         52:f4:ff:9f:27:53:ba:d8:de:77:bb:08:2c:3e:64:5a:f3:d7:
         c4:d3:1c:bd:41:8d:b7:24:7c:32:7d:67:f2:9a:f0:51:48:39:
         22:4e:bb:9c:f6:c0:25:40:3a:12:0e:13:28:64:c9:17:3d:9f:
         27:8b:3a:6c:01:ba:f7:ed:7c:8b:32:63:98:0e:f7:8c:7b:88:
         55:6b:43:2e:4a:6b:36:9f:f9:24:5e:f0:68:d7:fb:4c:d4:63:
         97:2d:93:74:cd:56:01:8f:4f:82:94:50:ca:55:67:1c:00:72:
         a8:55:8c:9c:39:52:0c:79:79:c5:e9:08:2b:59:b2:20:c6:c4:
         10:6e:c2:10:1b:13:9f:e2:5b:6a:f5:8f:6f:9e:09:80:09:87:
         21:13:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----